Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/741f5607-4add-3658-83f3-e759b21252b3.roa
File:                     741f5607-4add-3658-83f3-e759b21252b3.roa (raw, json)
Hash identifier:          k0oAhkWXf4TEprQba2mzk1hiH2SHFUZKv8yzNmBEh6c=
Subject key identifier:   DD:31:A2:69:5B:BF:9C:93:DF:D1:7A:A7:20:F1:CB:D4:16:D2:E4:4E
Certificate issuer:       /CN=5eb9bc8d-6001-40dd-8162-ac1cf8678a49
Certificate serial:       010D0C9F4328584F4972BB96F80D3B346FECCA40
Authority key identifier: 56:6D:D5:A6:9A:C8:37:9F:47:12:5A:0F:C9:33:C0:3A:29:59:97:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/741f5607-4add-3658-83f3-e759b21252b3.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        2610:108:bf10::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:bb:96:f8:0d:3b:34:6f:ec:ca:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5eb9bc8d-6001-40dd-8162-ac1cf8678a49
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=bd26e2fc-b37f-472e-bb96-783ee8266a83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c3:51:af:6c:46:6a:9b:69:3c:61:63:ed:74:
                    f8:6c:e9:60:bb:de:00:4b:15:8f:20:c5:1f:35:6f:
                    b1:48:59:bd:fd:2e:6a:53:3d:cb:51:ad:91:f4:0d:
                    d7:6d:00:83:43:77:d5:0c:5d:54:8a:38:a0:4c:a5:
                    8d:01:94:c6:f4:b1:02:d0:e1:65:08:7b:7f:02:02:
                    58:d2:82:51:34:cf:16:5e:b0:68:35:6c:d1:6b:91:
                    37:fe:85:04:72:af:b3:47:8c:bd:9f:19:a5:44:9e:
                    cc:dc:54:11:49:a4:c8:59:91:5e:96:74:bf:4d:87:
                    5f:ea:91:2b:03:4c:42:d6:33:af:6e:eb:93:44:90:
                    ae:18:80:d1:a4:b6:3a:7e:b3:3f:0c:62:79:b6:4a:
                    5f:48:80:ac:d6:39:95:7d:ec:5c:66:04:05:3d:05:
                    8d:1e:45:54:ed:aa:7f:09:a3:c6:46:60:b1:ec:56:
                    b0:46:04:e1:02:82:e5:fb:11:07:5d:84:49:54:67:
                    9f:35:98:85:de:82:2c:79:f1:f2:cd:7a:8d:b3:bf:
                    cd:c9:69:0c:88:ac:57:68:3f:f9:0a:ab:56:2f:9c:
                    57:d7:bc:d9:9f:9e:af:0f:35:bd:b6:0f:28:86:49:
                    18:91:ba:a0:0e:42:e7:d8:79:02:7f:dd:a1:81:0f:
                    7c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:31:A2:69:5B:BF:9C:93:DF:D1:7A:A7:20:F1:CB:D4:16:D2:E4:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/741f5607-4add-3658-83f3-e759b21252b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.crl

            X509v3 Authority Key Identifier:
                keyid:56:6D:D5:A6:9A:C8:37:9F:47:12:5A:0F:C9:33:C0:3A:29:59:97:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:108:bf10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:67:10:e9:78:c6:e4:d8:11:2e:72:dd:dc:cd:35:87:0f:7d:
         9a:be:50:ac:8b:0d:c7:50:79:73:3d:d2:7c:31:00:39:d0:14:
         3e:9b:b2:a4:67:cc:ad:d1:2d:49:42:ab:e0:75:10:f4:56:c3:
         23:43:a4:6b:01:d0:30:97:63:3b:63:63:72:b2:ce:de:f3:69:
         26:6d:6c:77:62:d0:2c:f1:90:a0:72:f8:25:23:be:ba:a1:1a:
         1f:ac:45:93:59:17:02:92:b2:bd:ec:eb:84:8d:25:f2:9f:ff:
         81:b7:04:4d:27:b5:78:9a:2e:de:49:76:4f:ff:3e:a5:d5:7f:
         b9:6a:07:98:bb:c8:a9:60:ad:f6:dd:89:c4:df:37:f4:27:bd:
         df:f9:c0:97:bb:d6:01:de:30:0e:45:2c:67:a4:7d:79:a3:51:
         ce:ac:b3:e2:92:96:61:11:20:bc:da:1a:fe:3b:7d:b2:3d:45:
         ce:1d:b2:16:c6:08:2f:49:02:02:64:30:89:bb:af:48:c2:1a:
         db:db:8d:66:47:93:d0:54:47:65:98:61:87:f6:b5:b6:d2:ea:
         33:2a:37:d0:6a:3d:b8:aa:62:76:bc:a5:ab:b6:47:74:0f:dd:
         54:71:f4:46:8f:51:e7:61:8e:9b:94:c1:23:33:7d:6f:37:b1:
         dd:b2:3b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 05:40:37 2026 by rpki-client